RedWizard/playbook.yml at main · Red-Team-LAB/RedWizard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
# RELAY CONFIGURATIONS

- name: "***** CONFIGURING ALL RELAYS *****"
  hosts: relays
  gather_facts: yes
  roles:
    - relay-common
  tags:
    - relay
    - relay-common

- name: "***** CONFIGURING USERS FOR RELAYS *****"
  hosts: relays
  gather_facts: yes
  roles:
    - users
  tags:
    - relay
    - users
    - users-relay

- name: "***** CONFIGURING DROPBOX RELAYS *****"
  hosts: relays_dropbox
  gather_facts: yes
  roles:
    - relay-dropbox
  tags:
    - relay
    - relay-dropbox
    - dropbox

- name: "***** CONFIGURING PHISHING RELAYS *****"
  hosts: relays_phishing
  gather_facts: yes
  roles:
    - relay-phishing
  tags:
    - relay
    - relay-phishing
    - phishing

# The relays_nginx needs to have serial: 1 set so multiple nginx roles do not interfere
- name: "***** CONFIGURING NGINX RELAYS *****"
  hosts: relays_nginx
  serial: 1
  gather_facts: yes
  roles:
    - relay-nginx
  tags:
    - relay
    - relay-nginx
    - nginx
    - stage-one
    - cobalt-strike

# Configure the CobaltStrike DNS relays
- name: "***** CONFIGURING Cobaltstrike RELAYS *****"
  hosts: relays_cobalt_strike
  gather_facts: yes
  roles:
    - relay-cobalt-strike
  tags:
    - relay
    - relay-cobalt-strike
    - cobalt-strike

- name: "***** CONFIGURING OSINT RELAYS *****"
  hosts: relays_osint
  gather_facts: yes
  roles:
    - relay-osint
  tags:
    - relay
    - relay-osint
    - osint

# BACKEND CONFIGURATIONS

- name: "***** CONFIGURING BACKENDS *****"
  hosts: backends
  gather_facts: yes
  roles:
    - backend-common
  tags:
    - backend
    - backend-common

- name: "***** CONFIGURING USERS FOR BACKENDS *****"
  hosts: backends
  gather_facts: yes
  roles:
    - users
  tags:
    - users
    - backend
    - users-backends

- name: "***** CONFIGURING BACKEND GOPHISH *****"
  hosts: backends_gophish
  gather_facts: yes
  roles:
    - backend-gophish
  tags:
    - backend
    - backend-gophish
    - phishing

- name: "***** CONFIGURING BACKEND MANUAL PHISH *****"
  hosts: backends_manual_phish
  gather_facts: yes
  roles:
    - backend-manual-phish
  tags:
    - backend
    - backend-manual-phish
    - phishing

- name: "***** CONFIGURING BACKEND COBALT STRIKE *****"
  hosts: backends_cobalt_strike
  gather_facts: yes
  roles:
    - backend-cobalt-strike
  tags:
    - backend
    - backend-cobalt-strike
    - cobalt-strike

- name: "***** CONFIGURING BACKEND DROPBOX *****"
  hosts: backends_dropbox
  gather_facts: yes
  roles:
    - backend-dropbox
  tags:
    - backend
    - backend-dropbox
    - dropbox

- name: "***** CONFIGURING BACKEND OSINT *****"
  hosts: backends_osint
  gather_facts: yes
  roles:
    - backend-osint
  tags:
    - backend
    - backend-osint
    - osint

- name: "***** CONFIGURING BACKEND WEB CATCHER *****"
  hosts: backends_web_catcher
  gather_facts: yes
  roles:
    - backend-webcatcher
  tags:
    - backend
    - backend-webcatcher
    - webcatcher